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<57> Abstract- A system and method determines the proximity of the target node to the source node from the time required to 
O communicate messages within the node-verification protocol. The node-verification protocol includes a query-response sequence, 
O L erein me source node communicates a query to the target node, and the target node communicates a corresponding response to 

. sou _ e node target node is configured to communicate two responses to the query: a first response that is transmitted imme- 

Odiatelv uoon receipt of the query, and a second response based on the contents of the query. The communication time is determined 
^ based onthe time duration between the transmission of the query and receipt of the first response at the source node and the second 
^ response is compared for correspondence to the query, to verify the authenticity of the target node. 
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In accordance with this invention, the target node HOT is configured to provide 
two responses to the query. The target node HOT provides an immediate response upon 
receipt of the query, and then a subsequent response after processing the query. The source 
node 1 1 OS is configured to measure the time duration between the transmission of the 
5 query and the receipt of the first response from the target node 1 10T to determine the 

relative proximity of the target node HOT to the source node 11 OS. The source node is also 
configured to verify the authenticity of the target node 1 1 OT based on the second response 
from the target node 1 10T. In a preferred embodiment, the authenticity of the first response 
is also verifiable as originating from the target node 1 10T, either via the contents of the 

10 first response or the second response. 

Using known techniques, the distance between the source 1 10S and target HOT can 
be calculated using the determined communication time between the transmission of the 
query from the source 1 10S and the receipt of the first response from the target 1 10T. As 
noted above, in a typical embodiment, the communication time is used to determine 

15 whether the target 1 10T is local or remote from the source 11 OS. This determination is 

made in a preferred embodiment of this invention by comparing the communication time to 
a nominal threshold value, typically not more than a few milliseconds. If the 
communication time is below the threshold, the target 1 10T is determined to be local; 
otherwise, it is determined to be remote. Multiple thresholds may also be applied, to 

20 provide for a relative measure of the degree of remoteness of the target HOT from the 
source 11 OS. 

hi a typical embodiment, the source 1 10S uses the remote/local proximity 
determination to control subsequent communications with the target 1 10T, and/or to 
control access of the target node to system resources, such as data and processes, based on 
25 the proximity. For example, some files may be permitted to be transferred only to local 

nodes, all communications with a remote node may be required to be encrypted, some files 
may be prohibited from inter-continental transmissions, and so on. 

In a preferred embodiment of this invention, the above query-response process is 
integrated within a node-authentication process, such as a key-exchange process, which 
30 typically includes one or more query-response sequences. 

The OCPS protocol, for example, includes an authentication stage, a key exchange 
stage, a key generation phase, and subsequent data transmission phases. The key exchange 
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receipt of the queiy&om the source 1 1 OS . After sending the first response, the target 1 1 OT 
decrypts the query from the source 1 10S, using the private key of the target HOT, and 
generates a new message composed of a new random key and the decrypted random key. 
The target then encrypts the new message using the public key of the source 1 10S, signs 
5 the message using its private key, and transmits the enrypted and signed response 

contained in the query back to the source 1 10S, thereby verifying the identity of the target 
1 10T to the source 1 1 OS. 

When the source node 1 10S receives the first response, it terminates the 
aforementioned timer, thereby establishing a measure of the round-trip communication 
10 time between source 1 1 OS and target HOT. Upon receipt of the second response, the 

source node 1 10S verifies the signed message, using the public key of the target HOT, and 
decrypts the random numbers and random key from the response, using the private key of 
the source 11 OS. 

To confirm the key exchange, the source 11 OS transmits the decrypted new random 
15 number back to the target 1 10T. Both the source 1 10S and target HOT control subsequent 
communications based upon receipt of the proper decrypted random numbers. In 
accordance with this invention, the source 1 10S also controls subsequent communications 
based upon the determined communication time. 

If both nodes are verified, subsequent communications between the source 1 1 OS 
20 and target HOT encrypt the communications using a session key that is a combination of 
the random keys, the public keys, and a session index. 

The foregoing merely illustrates the principles of the invention. It will thus be 
appreciated that those skilled in the art will be able to devise various arrangements which, 
although not explicitly described or shown herein, embody the principles of the invention 
25 and are thus within the spirit and scope of the following claims. 
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6. The method of 




5, wherein 




the first response includes a random number, and 

the processing of the query further includes encrypting the item and the random 
number using a public key of the source node to form at least a portion of the second 
response. 

7. The method of claim 5, wherein 

the first response includes an encryption of a random number based on a public key 
of the source node. 

8. The method of claim 1, wherein 

determining the proximity includes comparing the communication time to a 
threshold value that distinguishes between local and remote nodes. 

9. The method of claim 1, further including 

restricting communications with the target node based on the proximity. 

10. The method of claim 1, further including 

restricting access of the target node to system resources based on the proximity. 

1 1 . A node on a network including: 

a communication device that is configured to receive a query from a source node 
and to transmit a first response that facilitates proximity verification of the node, to the 
source node upon receipt of the query, and a second response that facilitates a verification 
of the node to the source node, and 

a processor that is configured to process the query and produce therefrom the 
second response. 

12. The node of claim 11, wherein 

the processor is configured to process the query and produce the response as part of 
a cryptographic key-exchange protocol. 
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19. The node of claim 1 8, wherein 

the processor is configured to generate the query and process at least one of the first 
and second responses as part of a cryptographic key-exchange protocol. 

20. The node of claim 19, wherein 

the key-exchange protocol corresponds to a Needham-Schroeder key-exchange 
protocol. 

21 . The node of claim 1 8, wherein 

the query and at least one of the first and second responses correspond to at least a 
portion of an OCPS protocol initiated by the node. 

22. The node of claim 18, wherein 

the query includes an encryption of an item based on a public key of the target 
node, and 

the second response includes a decryption of the item based on a private key of the 
target node. 

23 . The node of claim 22, wherein 

the first response includes a random number, and 

the second response includes an encryption of the decryption of the item and the 
random number, using a public key of the node. 

24. The node of claim 23, wherein 

the second response further includes a signature of the decryption of the item and 
the random number, using a private key of the target node. 

25. The node of claim 22, wherein 

the first response includes an encryption of a random number based on a public key 
of the node. 
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